General
- Target 2026-10-08_44df418fbdad81eb1fce83659b57407b_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- Sample261009-thq3jsca67
- SHA256 93d906dc7801593128174c91923bb47cff6baaac86dd7e420702d05ddf8ca342
- MD5 44df418fbdad81eb1fce83659b57407b
- SHA1 1d5a525e812494a619d95af1c7c078cada529e9a
- SHA512 3da439d6212e523a486363eae0b480efdc15a1c1c77c982bf3a5c03707b1520de5a9453de780c183e5f93704bc086ae474842e067fb9b536c5e05d721d9fbf22
- SSDEEP 3072:ejyLJAZaMr4yhtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:wyLJq/IJjiJcbI03GBc3ucY5DCSjX
- TLSH T1D7847C04BAA4F0B6D995043800EF9F3A967E74281726CBC7E754CE5D9A113C3AA3479F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-10-08_44df418fbdad81eb1fce83659b57407b_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop.exe
Resource
win10v2004-20260911-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
systex
C2
-
http://xytets.com:2345/t.asp?os=wangba
-
http://xytets.com:2345/t.asp?os=home
-
http://xytets.com:2345/t.asp?ver=xxx&mac=0-0-0-0&os=vm
Targets
-
- Target 2026-10-08_44df418fbdad81eb1fce83659b57407b_amadey_darkgate_elex_rhadamanthys_smoke-loader_stealc_stop
- Size 376KB
- SHA256 93d906dc7801593128174c91923bb47cff6baaac86dd7e420702d05ddf8ca342
- MD5 44df418fbdad81eb1fce83659b57407b
- SHA1 1d5a525e812494a619d95af1c7c078cada529e9a
- SHA512 3da439d6212e523a486363eae0b480efdc15a1c1c77c982bf3a5c03707b1520de5a9453de780c183e5f93704bc086ae474842e067fb9b536c5e05d721d9fbf22
- SSDEEP 3072:ejyLJAZaMr4yhtKOsNi6cWgOEkbaFKnjiqQnjwbufspN3GGomU3/03ucYfBLx9pq:wyLJq/IJjiJcbI03GBc3ucY5DCSjX
- TLSH T1D7847C04BAA4F0B6D995043800EF9F3A967E74281726CBC7E754CE5D9A113C3AA3479F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE